The cross-chain protocol THORChain has been hacked, with cybercriminals stealing over $10 million in crypto assets across Bitcoin, Ethereum, BNB Chain, and Base.

On-chain analyst ZachXBT was the first to report the attack, initially estimating the damage at $7.4 million.

According to PeckShield, the stolen assets include 36.75 BTC valued at around $3 million and approximately $7 million in assets from BNB Chain, Ethereum, and Base. Most of the stolen funds are concentrated in two addresses.

#PeckShieldAlert @THORChain has been exploited for ~$10M worth of crypto, including 36.75 $BTC ($3M) and ~$7M worth of assets from #BNBChain, #Ethereum, and #Base.

The stolen funds mainly sit in:
bc1ql4u94klk265lnfur2ujk9p6uh52f2a8jhf6f37… pic.twitter.com/mhWIWueVPK

— PeckShieldAlert (@PeckShieldAlert) May 15, 2026

In the wake of the attack, the RUNE token dropped 12% to $0.508.

Analysts from Lookonchain confirmed ZachXBT's assessment, noting that the total damage exceeded $10 million.

According to @zachxbt, #THORChain appears to have been exploited across multiple chains, including #Bitcoin, #Ethereum, #BSC, and #Base, with stolen funds already exceeding $10M.https://t.co/Pqj8JwXdAj pic.twitter.com/lYBjuhnKB5

— Lookonchain (@lookonchain) May 15, 2026

THORChain developers have not officially confirmed the hack but have temporarily disabled several network functions for investigation.

This is not the first incident of its kind for the project. In January 2025, the protocol froze its lending platform ThorFi amid rumors of insolvency. The protocol later resolved a $200 million debt issue through new token issuance and restructuring.

In September, hackers breached the personal wallet of the THORChain founder. According to ZachXBT, North Korean groups were involved in the $1.2 million attack.

THORChain is frequently used for laundering stolen funds, as cross-chain exchanges complicate transaction tracking.

Recently, assets stolen from Kelp were withdrawn through the protocol. During these operations, daily trading volumes reached $394 million.

Recall that in April, Kelp was attacked, allegedly by the Lazarus Group. This hack became the largest in the DeFi sector this year.